Panduit IntraVUE

p a href= https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-204-04.json strong View CSAF /strong /a /p h2 Summary /h2 p strong Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. /strong /p p The following versions of Panduit IntraVUE are affected: /p ul li IntraVUE lt;=3.2.1a14 nbsp; /li /ul div class= csaf-table table class= tablesaw tablesaw-stack data-tablesaw-mode= stack data-tablesaw-minimap thead tr th role= columnheader data-tablesaw-priority= persist CVSS /th th role= columnheader Vendor /th th role= columnheader Equipment /th th role= columnheader Vulnerabilities /th /tr /thead tbody tr td v3 10 /td td Pronetiqs /td td Panduit IntraVUE /td td Plaintext Storage of a Password, Unintended Proxy or Intermediary ('Confused Deputy'), Exposure of Sensitive System Information to an Unauthorized Control Sphere, Inadequate Encryption Strength /td /tr /tbody /table /div h3 Background /h3 ul li strong Critical Infrastructure Sectors: /strong Critical Manufacturing, Energy, Information Technology, Water and Wastewater /li li strong Countries/Areas Deployed: /strong Worldwide /li li strong Company Headquarters Location: /strong Netherlands /li /ul hr h2 Vulnerabilities /h2 div class= csaf-accordion p a class= csaf-accordion-toggle-all href= # Expand All + /a /p div class= csaf-accordion-item h3 a class= csaf-accordion-toggle href= # CVE-2026-40430 /a /h3 div class= csaf-accordion-content p Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API. /p p a href= https://www.cve.org/CVERecord?id=CVE-2026-40430 View CVE Details /a /p hr h4 Affected Products /h4 h5 Panduit IntraVUE /h5 div class= ics-vendor-version-status div class= ics-vendor strong Vendor: /strong br Pronetiqs /div div class= ics-version strong Product Version: /strong br Pronetiqs IntraVUE: lt;=3.2.1a14 /div div class= ics-status strong Product Status: /strong br known_affected /div /div div class= ics-remediations h6 Remediations /h6 p strong Vendor fix /strong br Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. /p p strong Mitigation /strong br For further questions, please contact Pronetiqs at [email protected]. br a href= mailto:[email protected] mailto:[email protected] /a /p /div p strong Relevant CWE: /strong a href= https://cwe.mitre.org/data/definitions/256.html CWE-256 Plaintext Storage of a Password /a /p hr h4 Metrics /h4 div class= csaf-table csaf-metrics-table table class= tablesaw tablesaw-stack data-tablesaw-mode= stack data-tablesaw-minimap thead tr th role= columnheader data-tablesaw-priority= persist CVSS Version /th th role= columnheader Base Score /th th role= columnheader Base Severity /th th